38. Traps

Be whimsical and want the administrator to execute the program you uploaded on the server. Pen, fun, pavilion www. biquge。 info Either you're insane, or the administrator is insane!

Let's see if the uploaded directory is in the same web directory as apahce, if that's the case, it's possible for Daogui to request this program through the server, and Daogui has tried all the possibilities he can think of. None of them worked out. Think about it, how could the administrator of the other party be so powerful, how could he make such a low-level mistake. It seems that this FTP and LAN are strictly separated. I have to think of other ways.

Continue to hang out as an administrator on BBS, and although it's a bit dangerous, thankfully that CaptionTom doesn't seem to be online today.

When you don't care, there are often windfalls. Dao Kei suddenly found that on BBS, the administrator can upload attachments when posting. This attachment is placed under a directory on the LAN, and this directory can be legally accessed through the LAN. Hehe, this site is written by PHQ. Wouldn't Dao Kei be able to write PHQ code?

The script statement is not complicated, and Daogui can be proficient in so many things, such as reading files, writing files, etc. The most common for hackers. Immediately wrote a download program, and got the password file called passwd under Unix, and it was more than half the victory.

But Dao Kei tried it and failed. It seems that the administrator has set the permissions of the passwd file, and there is no way to read the file with the permissions of the apache process.

Let's think of something else. Dao Kei knew the upload account of the captiontom. Suddenly, I have a flash of inspiration, I don't know if his VSFTP uses a virtual account, or a system account? If it's a system account, hehe, you're in trouble. In a flash of thought, the SSH connection client has been launched in my hand. Enter the IP address, type in the ftp account number of CaptionTom, and press enter.......

Haha, Dao Kei almost laughed out loud, and a beautiful $ symbol appeared in front of him. It seems that his VSFTP is using a system account.

This is not to blame the administrator.,Because the administrator's FTP is open to the outside world anonymous.,So there's no way for you to be a god.。

The administrator of this BBS is obviously the system administrator who takes special care of him, so he opened a private account for him for the convenience of management. With the SSH protocol, there should be no possibility of eavesdropping. However, he never dreamed that Dao Kei would connect BBS with the account of this system, and moreover, decipher that person's account number.

The next problem is to turn yourself into root, and UNIX is an absolute disadvantage in this regard. As long as Unix can get his basic account and be able to upload files. Executable files. Then meet the master, this UNIX will be done.

Dao Kei already has two conditions, and immediately see if he can carry out the procedure. Immediately wrote a simplest helloworld program in D. Compile using GCD One. No errors, GCD is available, I have all the permissions under this captiontom account. Dao Kei's mood was much lighter, and he already felt that victory was just around the corner.

The following is to use the overflow method, as long as it overflows, you can see the # sign. In fact, the web page is the most vulnerable place. Starting with him, the gap can generally be found. It's not very easy to start with the system right now.

First use the overflow program that uploaded a unix, compile, execute, and wait for the # number to appear with a smile, OK!

Dao Kei has begun to be able to see the situation of the terrorists in various strongholds through the system.

"Aha, are terrorists so relieved by their own intelligent system that there are so many people guarding it? "Major Bill Door.

Dao Gui didn't answer, and continued to crack, the core control and defense of this system are very tight, and it is impossible to operate this weapon system for our use. In the end, only uploading a Trojan and the Klein virus paralyzed it.

Daogui started uploading viruses, and the effect was good, and the system was paralyzed.

"Major Bill, you can give the order for a general attack. ”

"Alright, Henry, Getter, you two protect Captain Harry, and I will lead the other brethren to launch a general assault on Jin Sanpang and announce the end of this kid. ”

The two hundred elite soldiers were divided into six groups and marched from the six passages to Jin Sanfat's main acupoint, and through the video on the computer, Dao Gui could clearly see their movements.

Something was wrong, Dao Gui suddenly realized in his heart, how could the defense of the terrorists suddenly withdraw and run out.

Daogui picked up the microphone and was about to tell Bill about the anomaly. The abnormal mutation protruded, and the paralyzed intelligent weapon system actually moved, spraying out a bullet and hitting the two hundred Qin soldiers who were caught off guard, and the Qin soldiers who were shot fell to the ground, but there was no blood splattered out, it should be a narcotic bullet.

The terrorists who had been hiding came out of nowhere, and began to disarm and tie up the unconscious Qin soldiers.

As soon as the video on the computer changed, an elderly man wearing a white coat, the whole image was a little scary, half bald, and generally blue long hair appeared. Only one of his eyeballs was rolling back and forth, and his left hand turned out to be all-metal. He said: "Little friend, welcome to you, the old man's name is Jingpu, welcome to the headquarters of the Labor Party, ha, you still have some ability, and finally found the back door left by the old man, and came in dark, but will everything be so simple, ha, ha, ha......"

Dao Gui understands that the other party's technology must be above him, or this intelligent system is too rebellious.

"If we don't have this intelligent system, we have the same resources, how much time can you win me?" asked Dao Kei unconvinced.

"Hehe, have backbone, you are Sam or Carter's apprentice, the two of them and the old man used to be brothers, when did Nai make people, the two of them are firmly in the first and second hackers of Mercury, then the old man is the third, but as long as there is this intelligent system, even if the two of them join forces, it is definitely not the opponent of the old man, and this system has not yet exerted one-tenth of its power, children, be interested in this system. ”

Dao Gui secretly said in his heart, he felt interested, but he was in danger, who still had this thought.

"Captain Harry, the Major must have been captured by them, we shouldn't be able to rush out, let's fight with them. Henry asked his only superior.

Seeing that the momentum was not good, the well-trained Henry and Gate, who were already at the door and the window, were ready for battle and assumed a fighting posture. The principled soldiers of the Qin army would rather die in battle than surrender, not to mention that the other party was a notorious terrorist.

"Okay, kill yourself, just today, we have to kill a few more terrorists to be enough!" Dao Kei said, although considering that he might give his life to this operation, but he died like this, Dao Gui was still unwilling.

"Very good, very good, worthy of being the strongest army of Mercury, even a weak scholar can have this spirit, but you are such an excellent talent, will the old man be willing to kill you?"

"Alright, Professor Jing, don't talk to this kid," let this Führer announce the ultimate goal of this battle, boy, this battle, whether it is you or ours, will have zero casualties, and you will all be captured alive. A man in his thirties, with a fat head, big ears, a bull's nose, a small flat head, and a crocodile mouth, squeezed into the camera and said, he also pressed a button.

Kim Eun-jeong!Dao-kyyu knows the image of this man. Suddenly, it is not known that three tranquilizer bullets were fired from there in the room. "Plop, plop, plop", three sounds, Dao Gui and the two Qin soldiers who were guarding them all rolled over and fell to the ground.